This is quite interesting, and an investigation worth reading.
The company that is being impersonated in the Payroll and HR departments is a company called Deel.
Whoever is doing this is stealing usernames, passwords and circumventing two-factor authentication.
This kit also uses what they call a web worker. I don’t think I ever heard of a web worker before, but they explain this well.
While Malwarebytes investigated, the FBI released a PSA number 250424 in regards to what is going on here.
Instead of me breaking this down, why not read the entire article? I found it very interesting, and I hope you do too.
The article is titled Cyber criminals impersonate payroll, HR and benefits platforms to steal information and funds so please feel free to let us know what you think.
Stay tuned, we’ve got a bunch more blogging coming out very soon.
Discover more from The Technology blog and podcast
Subscribe to get the latest posts sent to your email.